CVE-2026-83120

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

38th percentile - higher than 38% of all known CVEs

Summary

Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Affected supported versions are 12.2.3-12.2.15. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to compromise Oracle Alert.

Risk Assessment

A low privileged attacker can take over Oracle Alert, impacting confidentiality, integrity, and availability. The CVSS score of 8.8 indicates critical risk.

Recommendation

Immediately apply the Oracle patches for versions 12.2.3-12.2.15 or upgrade to a patched version. Restrict network access to Oracle Alert.

Other vulnerabilities in Oracle Alert

CVE-2026-83089High
Vulnerability in Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. Easily exploitable issue allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify or delete it.

Original NVD description (English source)

Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Alert. Successful attacks of this vulnerability can result in takeover of Oracle Alert. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS